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In the Claims: 

1 . (Previously Presented) An apparatus for performing a SubByte function of the Rijndael 
Block Cipher, comprising: 

an S-box circuit including 

an inverse transformation circuit having a lookup table and being 
configured and arranged to transform an input using a look-up table; 

a combinational logic circuit configured and arranged to perform an 
affme-all transformation that performs both an affine and inverse affine 
transformation in response to respective load patterns. 

2. (Previously Presented) The apparatus as claimed in claim 1, wherein: 

the look-up table is the multiplicative inverse in the finite field GF(2 8 ) having 
{00} mapped to itself 

3. (Previously presented) The apparatus as claimed in claim 2, wherein: 

the look-up table is implemented by a read-only memory (ROM); and 
the combinational logic circuit implements the equations 
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having p = P0P1P2P3P4P5P6P7 as a load pattern consisting of {10001 111} for the affine 
transformation and {00100101 } for the inverse affine transformation and having v as a 
load vector = V0V1V2V3V4V5V6V7 consisting of { 1 10001 10} for the affine transformation 
and {10100000} for the inverse affine transformation. 

4. (Previously presented) An apparatus for encrypting and decrypting data, comprising: 
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a data processing module arranged to perform a byte substitution, wherein at least 
part of said data processing module comprises: 
a look-up table, 

a storage device for storing the look-up table, and 

a circuit having shared logic that performs a single transform that accomplishes an 
affine and an inverse affine transformation. 

5. (Previously presented) The apparatus as claimed in claim 4 wherein said look-up 
table is a multiplicative inverse of the finite field GF(2 8 ). 

6. (Previously presented) The apparatus as claimed in claim 5, wherein said look-up table 
is implemented by means of a read only memory (ROM). 

7. (Previously presented) The apparatus as claimed in claim 4, wherein said look-up table 
is implemented by means of a read only memory (ROM). 

8. (Original) The apparatus as claimed in claim 4, wherein the apparatus comprises a 
plurality of instances of a data processing module arranged in a data processing pipeline. 

9. (Original) The apparatus as claimed in claim 4, wherein the apparatus is arranged to 
perform encryption or decryption in accordance with the Rijndael Block Cipher, and 
wherein the data processing module is arranged to implement a Rijndael round. 

10. (Original) An apparatus as claimed in claim 9, wherein the data processing module is 
arranged to implement the SubByte transformation of the Rijndael round using the 
lookup table composed with the affine transformation for encryption and the inverse 
affine transformation for decryption. 

11. (Previously presented) The apparatus as claimed in claim 10, wherein said look-up 
table is implemented by means of a read only memory (ROM). 
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12. (Original) A apparatus for performing a SubByte function of a round of the Rijndael 
Block Cipher, comprising an S-box constructed by composing, 

means for obtaining the multiplicative inverse in the finite field GF(2 8 ), and 
means for performing an affine-all transformation consisting of an affine and 
inverse affine transformation as a single affine transformation. 

13. (Previously presented) The apparatus as claimed in claim 12, wherein said means for 
obtaining the multiplicative inverse is a look-up table, and said means for performing the 
affine-all transformation is a combinational logic circuit. 

14. (Previously presented) A method for performing a SubByte function of a Rijndael 
round of the Rijndael Block Cipher, comprising the steps of 

creating a look-up table for the multiplicative inverse in the finite field GF(2 8 ); 

providing an affine-all transformation consisting of an affine and inverse affine 
transformation in a single affine transformation; 

composing an S-box constructed of the look-up table and the affine-all 
transformation; and 

performing a non-linear byte substitution using the composed S-box. 

15. (Previously presented) The method of claim 14, wherein the providing step further 
comprises the step of providing a shared logic circuit that performs the single affine 
transformation. 

16. (Previously presented) The method of claim 14, further comprising the step of storing 
the look-up table in a read-only memory (ROM). 

17. (Previously presented) The method of claim 16, wherein the providing step further 
comprises the step of implementing a shared logic circuit that performs the single affine 
transformation. 
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18. (Previously presented) The method of claim 14, wherein: 

o 

the look-up table is the multiplicative inverse in the finite field GF(2 ) having 
{00} mapped to itself; and 

the providing step further comprises the step of implementing a combinational 
logic circuit that performs the single affine transformation. 

19. (Previously presented) The apparatus as claimed in claim 4, wherein, for a given 
input vector having a number of bits, the shared logic is configured to perform an inverse 
affine transform responsive to one load pattern and to perform an affine transformation 
responsive to another load pattern, the load patterns having the same number of bits as 
the input vector. 
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